Week 4, 2026

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.8
  CVE-2026-24061 telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable.

  GNU · Inetutils

  EPSS 99%
• Critical 9.3
  CVE-2026-23760 SmarterTools SmarterMail < Build 9511 Authentication Bypass via Password Reset API

  SmarterTools · SmarterMail

  EPSS 96%
• Critical 9.3
  CVE-2026-24423 SmarterTools SmarterMail < Build 9511 Unauthenticated RCE via ConnectToHub API

  SmarterTools · SmarterMail

  EPSS 88%
• Critical 10.0
  CVE-2026-21962 Vulnerability in the Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: Weblogic Server Proxy Plug-in for…

  Oracle · Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in

  EPSS 73%
• Critical 9.8
  CVE-2026-0770 Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability

  Langflow · Langflow

  EPSS 63%
• Critical 9.8
  CVE-2026-0769 Langflow eval_custom_component_code Eval Injection Remote Code Execution Vulnerability

  Langflow · Langflow

  EPSS 41%
• Critical 9.8
  CVE-2022-25369 An issue was discovered in Dynamicweb before 9.12.8. An attacker can add a new administrator user without authentication. This flaw exists due to a logic issue…
  EPSS 40%
• Critical 9.8
  CVE-2026-0768 Langflow code Code Injection Remote Code Execution Vulnerability

  Langflow · Langflow

  EPSS 28%
• Critical 9.8
  CVE-2025-56005 An undocumented and unsafe feature in the PLY (Python Lex-Yacc) library 3.11 allows Remote Code Execution (RCE) via the `picklefile` parameter in the `yacc()` …
  EPSS 19%
• Critical 9.9
  CVE-2026-22844 Zoom Node Deployments - Command Injection

  Zoom Communications · Zoom Node

  EPSS 13%
• Critical 9.8
  CVE-2026-0907 Incorrect security UI in Split View in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium…

  Google · Chrome

  EPSS 8.8%
• Critical 9.8
  CVE-2025-55423 A command injection vulnerability exists in the upnp_relay() function in multiple ipTIME router models because the controlURL value used to pass port-forwardin…
  EPSS 3.7%
• Critical 9.8
  CVE-2026-0755 gemini-mcp-tool execAsync Command Injection Remote Code Execution Vulnerability

  Gemini MCP Tool · gemini-mcp-tool

  EPSS 3.4%
• Critical 9.8
  CVE-2026-0761 Foundation Agents MetaGPT actionoutput_str_to_mapping Code Injection Remote Code Execution Vulnerability

  Foundation Agents · MetaGPT

  EPSS 2.5%
• Critical 9.8
  CVE-2025-15061 Framelink Figma MCP Server fetchWithRetry Command Injection Remote Code Execution Vulnerability

  Framelink · Figma MCP Server

  EPSS 2.2%

All 115 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• Medium 5.3
  CVE-2026-21852 Claude Code Leaks Data via Malicious Environment Configuration Before Trust Confirmation

  anthropics · claude-code

  EPSS 28%
• High 7.1
  CVE-2026-22218 Chainlit < 2.9.4 Arbitrary File Read via /project/element

  Chainlit · Chainlit

  EPSS 9.7%
• High 7.5
  CVE-2025-13878 Malformed BRID/HHIT records can cause named to terminate unexpectedly

  ISC · BIND 9

  EPSS 9.4%
• High 8.8
  CVE-2026-1324 Sangfor Operation and Maintenance Management System SSH Protocol session SessionController os command injection

  Sangfor · Operation and Maintenance Management System

  EPSS 7%
• High 7.3
  CVE-2026-1192 Tosei Online Store Management System ネット店舗管理システム imode_alldata.php command injection

  Tosei · Online Store Management System ネット店舗管理システム

  EPSS 6.9%
• High 7.5
  CVE-2025-66959 An issue in ollama v.0.12.10 allows a remote attacker to cause a denial of service via the GGUF decoder
  EPSS 5.3%
• High 8.3
  CVE-2026-22219 Chainlit < 2.9.4 SQLAlchemy Data Layer SSRF via /project/element

  Chainlit · Chainlit

  EPSS 5.2%
• High 8.2
  CVE-2026-20045 Cisco Unified Communications Products Remote Code Execution Vulnerability

  Cisco · Cisco Unified Communications Manager · Cisco Unity Connection · Cisco Unified Communications Manager IM and Presence Service

  EPSS 4.5%